id summary reporter owner description type status priority milestone component version severity resolution keywords cc focuses
20846 Multisite: Network Users can post comments without being members of the site Ipstenu "This is probably an 'ever since inception' issue and I can replicate it on 3.4
Setup:
Have a user added to your network but '''not''' to a site (domain.com/test).
Set up domain.com/test to only allow registered users to comment. Remember, we've not added this new user to the site, just the network.
Log in as that user and go to domain.com/test
Oh look! You can comment as a 'registered' user.
This should be check for 'Is this a user ''and'', if multisite, is this user a member of the site?'
It's that or the wording needs to be clearer that anyone registered on the network can comment." defect (bug) new low Future Release Comments 3.0 minor ux-feedback needs-patch multisite